Filesystem entitlement check skipped in Docker Buildx Bake multi-target builds
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Active
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Partial Red Hat: 1 without a fix
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-863.
Summary
Docker Buildx from v0.19.0 before v0.38.1 lets an untrusted Bake definition that builds multiple targets together expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the approved entitlements, which is an incorrect authorization flaw (CWE-863). A user who runs an untrusted Bake definition may be affected.
Written with Claude Haiku 5.5 from the sources below · 2026-11-06
Description from the CNA
In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the approved entitlements. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
Upgrade Docker Buildx to version 0.38.1, which fixes the issue. Red Hat Ceph Storage 9 is affected without a fix, and Red Hat has no fix plan for it yet.
Written with Claude Haiku 5.5 from the sources below · 2026-11-06
- Fix · CNA Docker Buildx (Docker) Fixed in 0.38.1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Docker Buildx 0.38.1
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2026-84837 Path check bypass in Docker Buildx Bake exposes unapproved filesPriority LOW 9
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Ceph Storage 9 | Affected | No fix yet: Fix deferred |
Timeline
- 2026-11-03 Threatist record created from CVE-2026-121541
- 2026-11-05 Priority changed: MEDIUM → LOW
- 2026-11-06 Affected versions changed · Red Hat
- 2026-11-06 CVSS score added · Red Hat
- 2026-11-06 CISA SSVC decision points changed
References
More Docker vulnerabilities
- TI-2019-11833 Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by… KEVCVSS 3.1HIGH 7.8
- TI-2019-04061 runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows… CVSS 3.1HIGH 8.6
- TI-2025-08316 Docker Desktop allows unauthenticated access to Docker Engine API from containers CVSS 4.0CRITICAL 9.3
- TI-2025-02823 Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion CVSS 4.0HIGH 7.3
- TI-2026-14229 Tar extraction in moby/go-archive can write outside the destination directory via link following CVSS 4.0HIGH 7.1
- TI-2023-21271 Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to… CVSS 3.1MEDIUM 6.5
Sources
- CVE-2026-121541 · CVE Program
- CVE-2026-121541 · NVD
- FIRST EPSS
- CVE-2026-121541 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences